CVE-2025-3046 Path Traversal via Symbolic Links in run-llama/llama_index

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the...

CVE-2025-3046

The CVE-2025-3046 entry concerns the ObsidianReader class in the run-llama/llama_index repository, affecting versions 0.12.23–0.12.28. A path traversal flaw arises from symlink handling: ObsidianReader does not resolve symlinks to real paths or enforce that resolved paths stay inside the vault, e...

LlamaIndex 路径遍历漏洞

LlamaIndex is a data framework for LLM applications in the LlamaIndex open source. A path traversal vulnerability exists in LlamaIndex version 0.12.27, which stems from improper handling of hard links in the ObsidianReader class, which could lead to a path traversal attack...

LlamaIndex 安全漏洞

LlamaIndex is a data framework for LLM applications from the LlamaIndex open source. A security vulnerability exists in LlamaIndex versions 0.12.23 through 0.12.28, which stems from an unresolved symbolic link in the ObsidianReader class that could lead to arbitrary file reading...

PT-2025-25205

Name of the Vulnerable Software and Affected Versions: llama index versions 0.12.23 through 0.12.28 Description: A flaw in the ObsidianReader class allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths and does not validate whether...

Hardlink-Based Path Traversal in ObsidianReader

Overview A vulnerability has been identified in the ObsidianReader class from llamaindex.readers.obsidian. This vulnerability allows an attacker to bypass the path restriction mechanism using hardlinks , enabling unauthorized access to sensitive system files such as /etc/passwd. Affected Componen...